SELMER COMPANION CURVES 
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BARRY MAZUR AND KARL RUBIN 



Abstract. We say that two elliptic curves Ei , E2 over a number field K are 
n-Selmer companions for a positive integer n if for every quadratic character 
X of K, there is an isomorphism Sel„(Ej-/iC) = Sel„{E2 / K) between the n- 
Selmer groups of the quadratic twists E^ , E2 ■ We give sufficient conditions for 
two elliptic curves to be n-Selmer companions, and give a number of examples 
of non-isogenous pairs of companions. 
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1. Introduction 

There has recently been much interest in the relative densities of p-Selmer ranks 
of elliptic curves in families consisting of all quadratic twists of a given elliptic curve 
E over a fixed number field K. There are 

• conjectures about these relative densities [16', 

• some theorems for p — 2 for elliptic curves over K — CI with full 2-torsion 
rational [3 [53] 

• some theorems for p — 2 for elliptic curves over arbitrary number fields K 
with other restrictions on the rational 2-torsion [9i [lOj 

The results here are still fragmentary, but the general sense of these conjectures and 
results is that the relative densities of the sets of characters x such that E^ has a 
fixed p-Selmer rank (the characters being ordered appropriately . . . ) are expected 
to depend only on a few of the basic features of the elliptic curve E and number 
field K. For example, ii p = 2 and Ga.\{K {E[2]) / K) ~ 6*3, then these densities 
depend only on a single parameter, a rational number S{E, K) € [0, 1] that we call 
the disparity [10]. Moreover, if K has a real embedding then S{E, K) = 1/2, so for 
such E and K these densities are absolute constants. 

At the present we have no results at all giving rank densities of p-Selmer groups 
of quadratic twist families when p > 2. For example, fix a number field K , a prime 
number p, and an elliptic curve E over K. We expect that the ranks of the p-Selmer 
groups in the family of all quadratic twists of E over K are unbounded, but we 
can prove this for no triple {K,p,E) with p > 2. Nonetheless, we have precise 
expectations |16| for the statistics governing p-rank densities in this context. 

In view of this type of constancy of densities of Selmer ranks, let us consider the 
Selmer rank function itself, rather than its statistics, and formulate the following 
inverse question. For every positive integer n, let Se\n{E / K) denote the n-Selmer 
group of E over K (see Definition 16. 2p . and for every quadratic character x of K, 
we denote by E^ the quadratic twist oi E hy x- 

Question 1.1. For a fixed prime p and number field K , how much information 
about E can he read off from the function x '^ diniF Sc\p{E^ / K) ? 
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This leads us to the foUowing definition. 

Definition 1.2. We will say that two elliptic curves Ei,E2 over K are n-Selmer 
companions if for every quadratic character x of K there is a group isomorphism 

SeUEf/K) = SeUE^/K). 

If n = Y\pi' , then Ei and E2 are n-Selmer companions if and only if they are 
Pj'-Selmer companions for every i. For this reason we will restrict in what follows 
to the case where n is a prime power. 

If El and E2 are isogenous over K by an isogeny of prime degree £, then so are 
Ef and i?| for every x, and the induced maps Se\n{Ef / K) — ^ Seln{Ef / K) are 
isomorphisms for every n prime to i. Thus in this case Ei and E2 are n-Selmer 
companions for every n prime to £. For this reason we are mainly interested in non- 
isogenous n-Selmer companions, although the case of isogenics of degree dividing n 
is still interesting. 

Our main result is Theorem 13.11 below, which gives sufhcient conditions for a 
pair of curves to be p'^-Selmer companions for a prime power p'^ . 

For example, we will show (see Q that the following pairs of non-isogenous 
curves, given with their labels from [2], are p'^-Selmer companions for p*^ as listed, 
over every number field K (and in particular over Q): 



pk 


label 


curve 


4 


1242L1 


y'^ + xy + y = x"^ — x'^ + X + 1 


1242is:i 


y^ + xy + y = x^-x^~ 1666739 - 2448131309 


5 


676B1 


y'^ =x^ +x^ --ix- 12 


676-Bl 


y2 = x^ - 28561X H- 1856465 


7 


10267V1 


y^ + xy + y = x^ -x^ - 34601a; - 2468631 


102601 


y^ + xy + y = x^ -x^ - 4241a; + 107353 


9 


6555LI1 


y2 + y = a;3 - a;2 + 59335a; + 3888371 


6555£;i 


y2 + y = a;3 - a;2 - 33735977475x- 2384987222304844 



A natural open problem is to give necessary and sufficient conditions for p- 
companionship, with a prime p. We have not found any example of a pair of 
p-Selmer companions having different conductors, or having different Galois action 
on their p-torsion points. In fj7]we discuss some related questions, including partial 
converses to Theorem 13. II 

It also seems natural to expect that a given elliptic curve can have only finitely 
many p-Selmer companions, even if we allow the prime p to vary. It is not difficult 
to show that for a given Ei/K and fixed p, there are only finitely many E2/K 
satisfying the hypotheses of Theorem 13. 1[ because all such curves must have the 
same set of primes of bad reduction. See Proposition 17.11 

Finally, much of what we do in this paper applies more generally to the Bloch- 
Kato Selmer groups [T] attached to a motive. The subtlest problem in the general 
case, as in the case of elliptic curves, is to understand the local condition at p in 
the definition of the Bloch-Kato p'^-Selmer group, and how it changes under twists. 
It would be of interest to try to express that local condition only in terms of finite 
congruence information related to the motive. 
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Notation. If iiT is a field, we let K denote a fixed algebraic closure of K , and Gk — 
Ga\{K /K). Let X{K) :— Honi(G'i<-, {±1}) be the group of quadratic characters of 
K. 

If E is an elliptic curve over K and ?n is a positive integer, then E[m\ will denote 
the kernel of multiplication hy m on E. 

If X is a local field and E is an elliptic curve over K^ then we will say that 
E has potentially good reduction if E has good reduction over some finite exten- 
sion F of /-C, including the case where E has good reduction over K^ i.e., F — K . 
Similarly we will say that E has potentially multiplicative reduction if E has mul- 
tiplicative reduction over a finite extension F of A', including the case where E has 
multiplicative reduction over K. 

2. Elliptic curves over local fields 

For this section suppose that K is a, finite extension of Q^ for some rational 
prime £, and E is an elliptic curve over K with potentially multiplicative reduction. 
Let ord/^- : K^ ^^ Z denote the valuation on K. 

Definition 2.1. There is a unique character ^ = tl^E/K & ^{K) such that the 
twist E''^ has split multiplicative reduction (see for example [501 §1-12]). We will 
call TJJ the splitting character of E/K . 

The next proposition is due to Tate [571 Theorem 1]. 

Proposition 2.2 (Tate [27]). There is a Tate parameter q = qE ^ K^ with 
ordxiq) < 0, and an isomorphism 

If E has split multiplicative reduction, then t^ik ** Gx-^quivariant. In general, 
we have 

TE/KiW^) = ^{(^)te/k{uV 
for every <j e Gk, where tp is the splitting character of E/K. 

Let fi^ denote the group of 77i-th roots of unity in K , and 

em-Gx -^ Aut(/x,„) A (Z/mZ)^ 

the mod m cyclotomic character. 

Definition 2.3. For ttt. > 0, define the canonical subgroup 

Cb/kH := TE/KifJ'm) C E[ni]. 

Lemma 2.4. There is a G k -isomorphism Ce/kV'A ^ f^m ®''1'e/Kj i-£-, Ce/k[^ 
is a cyclic group of order m on which Gk o,cts hy the character emipE/K- 

Proof. This is immediate from Proposition 12.21 D 

Let j{E) denote the j-invariant of E. 

Lemma 2.5. Suppose Ei, E2 are elliptic curves over K with potentially multiplica- 
tive reduction, p is a prime, andp \ oidK {j {Ei)) . Suppose further that either p ^ 2, 
or El and E2 have multiplicative reduction. 

Then for every k > 1 and every G k -"isomorphism A : Eilp''] — > E2[p''], we have 

KCe,/k[p''])^Ce.,/k[p'']- 
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Proof. Let Qi be the Tate parameter of Ei/K, and ipi the sphtting character. Let 
Ti = TEi/K be the map of Proposition l2.2l 

Fix a Gif -isomorphism A : Ei [p'^] —> E2 [p^] ■ By Proposition 12. 2[ for every 
a e Gk and /S e {K^ /qf)[p''], we have 

(1) M<^)n{f3r - n{f3) = n(/37/3) e r,(/x^.) = Ce^/kIp"]- 

Define 

Bj = {z'^ - z : z e E^ib''], a G G^, and ViM = V'2(ct) = !}• 
Then by ([T]) we have S^ C CejkIp'']} and since A is G^-equivariant we have 
XiBi)^B2. 

Choose 'f £ K with jP — qi. We have ordi<-(gi) = — ord_R-(j(-£'i)), so ordK{qi) 
is prime to p and [if (7) : iiT] = p. We will show that there is a cr € Gk such that 
7"^ ^ 7 and V'i(f) = ^'2(0-) = 1. 

Gase 1: Ei and E2 have multiplicative reduction. Since ordif (gi) is prime to p, 
K{-f)/K is ramified, so there is a cr in the inertia group Ik C Gk such that 7'^ ^ 7. 
If El and -E2 have multiplicative reduction, then ipi and 1/^2 sue unramified, so 

ipi{cr) = ip2i<y) = 1- 

Gase 2: p > 2. Since [iir(7) : iiT] = p, we have 7 ^ K{fip). Thus we can choose 
ctq G Ga'(^ ) such that 7"^" 7^ 7. Let cr = aQ. Since p ^ 2 and ctq fixes j'^''/j € /.ip, 
we have that 7°^/7 = {l'^° /lY 7^ 1- Since V-'i and -02 are quadratic characters, we 
also have V'i(o') = ^'2(0') = 1. 

Now choose f3 £ K with /^^ = (Zi- Then /3'^//3 is a primitive p'^-th root of 
unity, so ti(/3'^//3) generates Cs^/xb'^], and by ^ we have that ti(/3'^//3) G i?i. 
Therefore Bi = Cej^/k[p'^], so 

A(Cb,/k[/]) = A(i?i) = 52 C C^./Kb"]. 

The final inclusion must be an equality because both groups have order p'^ by 
Lemma 12.41 D 

3. Main theorem 

Suppose for this section that if is a number field. Fix a prime p and a power p'' 
of p, k> 1. Our main result is the following. 

Theorem 3.1. Suppose Ei and E2 are elliptic curves over K. Let St be the set 

of primes of K where Ei has potentially multiplicative reduction. Let m = p^^^ if 
p < 3, and m — p^ if p > 3. Suppose further that: 

(i) there is a Gk -isomorphism Ei [m] = E2 [m] , 

(ii) Si ~ S2, 

(iii) for all I £ Si = S2, the isomorphism of (i) sends Ce^/KiV^] to C^^/atJ'^]; 

(iv) for every p of K above p, either 

• p e Si = S2, or 

• k = 1. El and E2 have good reduction at p, and the ramification 
degree e{p/p) is less than p — 1. 

Then for every finite extension F of K , and every x G X{F), there is a canonical 
isomorphism 

SeV(^i^/F) ^ Selp.(£;2^/i^). 
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In particular Ei and E2 are p^-Selmer companions over every number field con- 
taining K . 

A slightly stronger version of Theorem 13.11 will be proved in SJS] below. We first 
give some remarks, consequences and examples. 

Remark 3.2. The proof of TheoremOwiU show that Selpfc(£'^/F), Selpfc(^|/F) 
are actually equal inside H^{F, Ef[p''^]) — H^{F, _Ej[p'^]), where we use the isomor- 
phism Ei[p''] = E2[p^] to identify H^{F, Ef[p'']) with H^{F, E^[p'']). See Definition 
and the remarks following it. 



Remark 3.3. A careful reading of the proof will show that when p = 3, if Ei and 
E2 have no primes of additive reduction of Kodaira type II, IV, II* , or IV* , then 
we can take m = B''" instead of 3^^+^ in the hypotheses of Theorem 13. II See Remark 
In particular if E is semistable, we can take m = ?i^ instead of m = 3'^+^. 



Corollary 3.4. Suppose K' is a number field with a unique prime p above p. 
Suppose El and E2 are elliptic curves over K' with potentially multiplicative re- 
duction at p, and with potentially good reduction at all primes different from p. 
Let m = p^^^ if P "^ i, o,nd m = p^ if p > 3. Then Ei and E2 are p^ -Selmer 
companions over every number field K containing K' {Ei[7n\, E2[m\) . 

Proof. Fix any group isomorphism A : Ei[ni\ — >■ i?2["^] that takes Ce^ik' ["^] to 
Ce^/k' ["^]- If ^ is a field containing K'[Ei[m\,E2[m]), then A is Gx-equivariant 
because Gk acts trivially on both sides. We have Si = S2 is the set of all primes 
of K above p, so all hypotheses of Theorem 13. II are satisfied. D 



Remark 3.5. One can also twist elliptic curves by characters of order i > 2. In 
this case the twist E'^ is an abelian variety of dimension ^ — 1, with an action of 
the group of l-ih roots of unity. One can study the n-Selmer groups Se\n{E^ /K), 
where n is an ideal of the cyclotomic field of ^-th roots of unity, and ask when two 
elliptic curves Ei, E2 have the property that '&e\n{E^ /K) = Se\n{E^ /K) for every 
character % of Gk of order I. An analogue of Theorem 13. II holds in this case, with 
a similar proof. 

4. Examples 

Suppose we are given elliptic curves i?i, E2 over K. We next introduce some 
tools to prove in practice that Ei and E2 satisfy the hypotheses of Theorem 13.11 
Let m = p^ or p''^-^ as in Theorem 13. II 



Remark 4.1. The most difficult hypothesis of Theorem 13.11 to check is (i), the 
existence of a G/i--isomorphism Ei [m] ~ £'2 [m] ■ When m < 5 this can be done by 
computing explicitly the (genus zero) family of all elliptic curves E over K with 
E[m] = Ei[m], and checking whether E2 belongs to this family. 

For larger m, the problem is more subtle. A necessary condition for the existence 
of such an isomorphism is that for every prime I of K where Ei and £'2 have good 
reduction, the traces of Frobenius Frob[ acting on £i[m] and £'2[w] are the same. 
In some cases this necessary condition can be turned into a sufficient condition 
(see for example [12]). We will take a more brute force approach, and for candidate 
curves that satisfy the necessary condition on traces for many primes, we will simply 
construct an isomorphism directly. 

We will discuss both of these approaches in more detail in Appendix [A] 
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It is natural to ask how common are pairs of non-isogenous curves Ei , E2 with 
_Ei[m] = E2[m] as GA'-modules. For some history of this question, see [l4l [T2l [8], 
Along these lines, we raise the following question. 

Question 4.2. Is there an integer N (depending only on the degree [K : Q]) such 
that for every m > N , there are no pairs of non-isogenous elliptic curves Ei, E2 
over K such that Ei[m] is G k -'isomorphic to E2[m\ ? 

If E is an elliptic curve, let j{E) denote its j-invariant. 

Remark 4.3. It is well-known (see for example [26]) that an elliptic curve E has 
potentially multiplicative reduction at a prime I if and only if OTdi{j{E)) < 0. Thus 
Si = S2 if and only if j(£'i) and ^(-©2) have the same primes in their denominators. 
This makes it very easy to check hypothesis (ii) of Theorem 13.11 
Hypothesis (iii) can often be verified by using Lemma 1^31 

Example 4.4. Consider the first example of the Introduction, with K — Q,,p^ = A, 
and 

El : y + xy + y — X — X + x + 1, 

E2:y^+xy + y^x^-x^- 1666739 - 2448131309. 

These are the curves 1242L1 and 1242K1, respectively, in [2]. The following propo- 
sition can be proved using the method of §A.2I of Appendix El using computations 
in Sage [19] and PARI/GP [23]. Its proof will be sketched at the end of KD 

Proposition 4.5. There is a Gq^- isomorphism i?i[8] = i?2[8]. 

Computing the j-invariants gives 

33-73 _ , 3 • 987697^ 



(2) ^'(^^^^TT^' ^■(^^^- 2-. 23 

so 5*1 = 5*2 = {2,23}. Combined with Proposition 14.51 this shows that Theorem 
I3.1f i.ii.iv) are satisfied. For i E {2, 23} both Ei and E2 have multiplicative re- 
duction at £, and ord£(j(-Ei)) is odd, so Lemma 1^751 shows that Theorem 13. If iii) is 
satisfied. 

Thus all hypotheses of Theorem 13.11 are satisfied, and we conclude that Ei and 
E2 are 4-Selmer companions over every number field. 

The third and fourth examples of the introduction, with p^ — 7 and 9, are proved 
in exactly the same way, using iiA.2l to construct a Gq-isoinorphisni Ei [m] = E2 [m] . 
For the p*' — 9 example, we use Remark 15.21 below so that (since Ei and E2 are 
semistable) we can take ttt, = 9 in Theorem 13.11 instead of ?tt, = 27. 

Example 4.6. Consider the second example of the Introduction, with X = Q, 
p'^ = 5, and 

Ei:y'^ = x^ + x^-Ax- 12 

E2:y^ ^x^ - 28561X -f 1856465 

These are the curves 67651 and 676S1, respectively, in fS]. We will prove the 
following proposition in §A.1I of Appendix lAl 

Proposition 4.7. There is a Gq- isomorphism i?i[5] = £^2 [5]. 
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Both El and E2 have conductor 676 == 2^ • 13^, j{Ei) = -208, and ^(£^2) = 
1168128. Thus Ei,E2 have good reduction at 5 and potentially good reduction 
everywhere, so Si = S2 is the empty set and all hypotheses of Theorem 13.11 are 
satisfied. We conclude that Ei and E2 are S-Selmer companions over every number 
field. 

The strategy of Example 14.61 along with the method described in i 3A.ll of Ap- 
pendix [A] works in exactly the same way to give many more examples of p-Selmer 
companions over Q with p = 2, 3 or 5. 

5. Elliptic curves over local fields, continued 

For this section let K he a finite extension of Qf or of R. Fix a rational prime 
power p*^. For every elliptic curve E/K, let ke — ke/k denote the Kummcr map 

KE/K-E{K)^H\K,E[p'']). 

For the proof of Theorem 13.11 we need to understand the image of ke ■ We will 
consider several cases. 

5.1. Potentially good reduction. 

Lemma 5.1. Suppose that either K is archimedean, or K is nonarchimedean of 
residue characteristic different from p and E has bad, potentially good reduction. 

(i) If P ^ 3, then image(KE) is represented by the cocycles 

{ct:teE[p''+^],p>'teE{K)}, 

where ct is defined by ct (tr) = t" ^ t for a G Gk ■ 
(ii) If p > 3, or if V is archimedean and p > 2, then image(K£;) = 0. 

Proof. We consider the archimedean and nonarchimedean cases separately. 

Case 1: K is archimedean. In this case (ii) is clear, because Gk has order 1 or 2 
so Hi(X, £;[/]) =0. 

For every p, the map E{K)[p] — > E{K)/p'^E{K) is surjective, so image(KE) = 
ke{E{K)[p]). If s G E{K)[p], then kb(s) is represented by the cocycle ct for (every) 
t E E[p''^^] with p'^t = s. This proves (i) in this case. 

Case 2: K is nonarchimedean of residue characteristic different from p and E has 
bad, potentially good reduction. Consider the filtration 

EiiK) C EoiK) C EiK) 

where Eq{K) is the subgroup of points with nonsingular reduction, and Ei{K) 
is the subgroup of points that reduce to zero 24, Chapter VII]. Then Ei{K) is 
a pro-£-group, where t is the residue characteristic of K. Since E has additive 
reduction, Eq{K)/Ei{K) is isomorphic to the additive group of the residue field of 
K, also an ^-group. The description of E{K)/Eo{K) in ^26j shows that the p-part of 
E{K)/Eo{K) is killed by p, and is trivial if p > 3. Hence E{K)/p'^E{K) = if p > 
3, and E{K)[p] — >■ E{K)/p^E{K) is surjective for every p. Therefore image(K£;) = 
if p > 3, and (as in Case 1) image(K£;) — ke[E{K)[p\) is represented by the cocycles 
{ct-.te Elp'^+^p^t e E{K)} if p < 3. This completes the proof. D 
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Remark 5.2. Suppose p — 3. If X is nonarchimedean and the Kodaira type of 
the reduction of E is not II, IV, IF, or IV*, then [26] shows that E{K)/Eq{K) has 
order prime to 3. Thus in those cases we have image (k^) = 0, just as when p > 3. 
This aUows us to take m = 3*^ instead of tti = 3^~^^ in Theorem l3.1l in this case (see 
Remark 13.31) . 



Lemma 5.3. Suppose K is nonarchimedean of residue characteristic not divid- 
ing m, and Ei, E2 are elliptic curves over K with potentially good reduction. If 
TO > 3 and Ei [m] = E2 [m] as Gk -modules, then either both Ei and E2 have good 
reduction, or both have bad reduction. 

Proof. This foUows directly from 21, Corohary 2(b) of Theorem 2]. D 

5.2. Potentially multiplicative reduction. Recall that if E has potentially mul- 
tiplicative reduction, then Proposition [221 gives a parameter q and an isomorphism 

TE/K-K'^/q^^EiK). 

Lemma 5.4. Suppose E/K has split multiplicative reduction. Then image(K£;) is 
the image of the composition 

K"" ^ H\K,fip.) —^ H\K,E[p'']) 

where the first map is the classical Kummer map, and the second is induced by the 
inclusion Te/k ■ fJ'pk ^^ E[p'^]. 

Proof. This follows directly from the commutativity of the diagram 

ifx -iJi(^,MpO 

f 

E{K)^^^H^K,E[p'']). 

O 

Definition 5.5. Suppose i is a quadratic extension of K. Let Ni^^x ■ L^ -^ K^ 
be the norm map, and let -0 € '^{K) be the quadratic character attached to L/K. 
Let /J. fc <Sitp denote a copy of fi k with Gk acting by epkTp instead of epk , and define 
a twisted Kummer map 

i^L/K ■■ ker(7Vi/^) — > H\K, n^k «) tp) 

where for x e ker(iV^/^), we choose u € K such that u^ = x, and then lyL/Ki^) is 
represented by the cocycle a i-^ {u'^)'^'^"^ /u. We leave it as an exercise to show that 
a i-> {u'^)'^'^"^ /u is indeed a cocycle with values in /Xpfc (g) 7/', when x € ker(A''i//^). 

Lemma 5.6. Suppose E/K has potentially multiplicative reduction, with nontrivial 
splitting character ip (i.e., E/K does not have split multiplicative reduction). Let 
q G K^ be the Tate parameter, and let L be the quadratic extension of K attached 
to ip- Let % be the image of the composition 

ker(iVi/^) ^^^^ H\K,^Ji^k®^|J) ^^^ H\K,E[p^]). 
(i) If p > 2, or if p = 2 and q ^ Ni^/^L^ , then image(K£;) = H. 
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(ii) Suppose p — 2 and q — Ni^/ji(j3) with /3 G L^ . Then image^HE) is the 
subgroup of H^{K,E[p'^]) generated by H and the class of the cocycle 

where a E K^ and o? — fi- 

Proof. Consider the commvitative diagram with exact rows 

1 ^q^ ^L"" ^L^'lq^ ^1 

M 

K^'lq^ ^1 

where we denote by M the right-hand norm map. The snake lemma shows that 
the map ker(iVi/^) -^ ker(A/') is surjective if g ^ Ni^/xL^ , and if g = Nl/k{P) 
then the cokernel of that map has order 2, and ker(A/') is generated by the image 
of ker(iVi/i<-) and /3. 

Proposition 12.21 shows that we have a commutative diagram 




'''E/K 



'''E/K 



E{K) 1^^H\K,E[p'']), 

and te/k ■ kcr(A/') — > E{K) is an isomorphism. (To see this last fact, note that 
te/k ■ L^ /q^ — ^ ^(^) is a group isomorphism satisfying te/k{u'') — — tb/a'I")'^ 
if a is the nontrivial automorphism of L/K, so teik{u) G E{K) if and only if 
m"" = u^^ ; i.e., if and only if M{u) = 1.) It follows that image(K_B) = "H if p > 2 
or if g ^ Ni^/kL^ 1 and \i q — Nl/k{P) then image(K£;) is generated by % and 
i^e{te/k{P))- 

Suppose p — 2 and q — Ni^/x{P): and choose a e K^ with a^ — /3. Then 
by definition k,e{te/k{P)) is represented by the cocycle a i— ?► TE/Kic^Y ~ '''e/k{o')i 
and by Proposition [221 

TE/K{ar - TE,K{a) = V-Mtb/kK) - TE/K{a) = r^/i^ (K)'^'("V«)- 
This completes the proof of the lemma. D 

Lemma 5.7. Let m — 2^^^ if P — 2, and m = p^ if p > 2. Suppose Ei and £'2 
are elliptic curves over K with potentially multiplicative reduction, and there is a 
Gk -isomorphism Ei[m] = -E2['7i] that identifies Ce^/kV'^] with CE2/K[^^^\■ 
{l) The splitting characters of Ei and E2 are equal. 

(ii) Suppose p — 2. Let qi be the Tate parameter of Ei, and ni € K^ with 
nf = qi. Then there is an x G K^ and an odd integer n such that 
q^ = qix"" and TE./Ki-^i) = TE^/Ki'^ix'^) in Ei[2''] = E2[2^]. 

Proof. Since Ce^/kV^] and Ce^/kV'A ^^'^ isomorphic GA'-modules, and m > 2, 
assertion (i) follows directly from Lemma 12.41 

Suppose p = 2, and let A : i?i[TO] -^ E2[m] be the Gif-isomorphism. We will 
abbreviate t^ := Te-/k- Replacing A by an odd multiple of A if necessary, we may 
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assume that the diagram 



(3) M« 



commutes. 

Fix /3i& K"" such that ;3|;" = qi. Then ri(;3i) e Ei[m], and wefDil32& K"" such 
that T2{p2) = A(ti(A)). Since T2{p2) € S2H, we have ;3^ G gf , say fif = q^. If 
n is even, then ;3™' = ±92 7 so T2{I3^ ) = T2(±1) G CE2/KVn\- But n (/?"'' ) ^ 
CEi/K[TTi], so this is impossible and n must be odd. 

Let ij) denote the common sphtting character of £^1 and E2- By Proposition [221 
for every a € Gk we have 

niPf/^) = niP!) - r.(A) = H<^)r^W^r - n(ft)- 

Applying A we see that A(Ti(/3f //3i)) == T2(/3f /,92). But l3f/(3i € /x„, so by ([3]) we 
have Pf/Pi = /3f //32. Thus {^2/^" = /32//3i for every a & Gk, so l32//3i e K. 
Let a; = /32//3i- Then q" = Qix"^, and if we take tti = Pf then tt^ = (71 and 

T2(7rix2) = T2(7ri/?|//32) = r2(/3|) = A(ri(/32)) = A(ti(^i)). 
This proves (ii). D 

5.3. The group scheme kernel of p*^. Let O be the ring of integers of K and 
F the residue field. Let £ be the Neron model of E, so £" is a smooth group 
scheme over O. Let £'^ be its connected component at the identity, so f '^ is an open 
subgroup scheme of £. Let f 9p C £/f be the closed fibers of these group schemes, 
and $ = f /p/f 9p the group of components of the closed fiber, viewed as a (finite 

etale) group scheme over F. Let £[p'^] the kernel of multiplication by p'' on £; this 
is a group scheme over O with finite generic fiber. 

Proposition 5.8. Suppose that multiplication by p induces a faithfully flat mor- 
phism £ — > f over O. Then £[p''] is a quasi-finite flat group scheme over O, and 
image(K£;) is the image of the composition 

ijippf(Spec(0),£[/]) ^ i//ppf(Spec(X),£[/]) ^ H\K,E[p'']) 

where Hh ^ means cohomology of abelian group schemes, computed in the fppf 
topology. 

Proof. This follows from [13, Lemma 5.1(iii)]. The long exact cohomology sequence 

k 

attached to ^ £[p''] -^ £ — > £ ^ gives 

-^ Hl^,iSpeciO),£) -^ i/f%f(Spec(0),f) 

-^ ffi,pf(Spec(0),£:b'=]) -^ iJii,pf(Spec(0), £)[/]. 

We have i/0,pf(Spec(O),£) = E{K), and Hl^,{Svec{0) , £)[p'^] = H\¥,^)[p^] by 
[131 Lemma 5.1(iii)]. It follows from our assumption on p that '^[p'^] — 0, so the 
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upper left vertical map in the following commutative diagram is an isomorphism: 
iff%f(Spec(0),f )//H0,pf(Spec(O),£:) ^ E{K)/p''E{K) 



Fippf(Spec(0),£[/]) 



i?ippf(Spec(if ),£[/]) ^H\K,E[p^]). 

The proposition follows. D 

Remark 5.9. If A' has residue characteristic p, then multiplication by p induces 
a faithfully flat endomorphism of E if and only if E has good or multiplicative 
reduction and p does not divide the order of $. 

6. Proof of Theorem 13.11 

The following is a slightly stronger version of Theorem 13.11 We will prove The- 
orem [HH] below, and then derive Theorem 13.11 from it. Fix a prime power p^ and a 
number field K. Recall that for every field F, we let X{F) = Hom(Gi?, {±1}). 

Theorem 6.1. Suppose Ei and E2 are elliptic curves over K . Let Si he the set 
of primes of K where Ei has potentially multiplicative reduction. Let m = p''+^ if 
p < 3, and m = p^ if p > 3. Suppose further that: 

(i) there is a G k -isomorphism Ei[m\ = E2[m\, 
(ii) Si ^82, 

(iii) for all I G Si — S2, the isomorphism of (i) sends CEi/Kii'm] to CE2/Ki['m], 
(iv) for every prime v above p, either 

• El and E2 have potentially multiplicative reduction at v, or 

• p > 2, El and E2 have good reduction at v, and the isomorphism of 
(i) extends to an isomorphism £i[p^] = £2[p''] over Spec(C'i<-^, ), where 
the group scheme £i[p''] is the kernel of multiplication by p'' in the 
Neron model of Ei . 

Then for every finite extension F of K, and every x G '^{F)j there is a canonical 
isomorphism 

Selpfc(£;i^/F) = Selpfc(£;f /F). 

In particular Ei and E2 are p^ -Selmer companions over every number field con- 
taining K . 

Definition 6.2. The p'^-Selmer group Selpk{E/K) C H^{K,E[p'']) of an elliptic 
curve E over K is 

Selp4E/K) := kcv {H\K,E[p'']) -^ ®H\K,,E[p''])/image{iiE/Kj)- 

V 

A GK-isomorphism i?i[j3'^] = E2[p^] allows us to identify 
H\K,Ei[p'']) = iJi(/f,F2[/]), H\K,,Ei[p'']) = H\K,,E2[p'']) for every v. 



We will show that under the hypotheses of Theorems 13. II and 16. 11 with these identi- 
fications, for every v and for every x G '^{Kv)^ the images of the horizontal Kummer 
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maps 

(4) ^ ^ II 

are equal. It will then follow from the definition that Selpfc(_Ej-/A') = Selpt (iJ^/iiT) 
inside H^{K, Ei[p'^]) ~ H^{K, E2[p'^]) for every x- This gives the canonical isomor- 
phisms referred to in Theorems 13.11 and 16.11 

Proof of Theorem 16. Jl Suppose Ei and E2 satisfy the hypotheses of Theorem 16.11 
We will show that image(K£x z^^^) — image(K£;x ;^^) for every place v of K and 
every x ^ X{K). Note that except in the case where v \ p and Ei,E2 have 
good reduction at p (Case 5 below), if the pair {Ei, E2) satisfies the hypotheses of 
Theorem 16.11 then so does the pair {Ef,E2) for every x & ^{K). Thus in Cases 
1-4, it is enough to consider x = 1- We will identify Ei[p''] with i?2[p*'] using the 
given isomorphism, and denote this G/i--module simply by E[p''']. 
We split the proof into several cases. 

Case 1: v \ 00. By Lemma l5.1i image(K£;. /^^) is zero if p > 2, and is completely 
determined by the Gif-module Ki[2'^+^] if p = 2. But if p = 2 then by assumption 
i?i[2*''+^] = E2[2'^^^] as Gj^-modules, so image{KEj^/K^) = image(K£;2/-ftr„)- 

Case 2: w I 00 and Ei has bad, potentially good reduction at v. By our assump- 
tions, V \ p and E2 also has potentially good reduction at v. By Lemma 15.31 the 
reduction of E2 is also bad. By Lemma [5Tl we again see that image(K£;./if^) is 
zero if p > 3, and in general is completely determined by the Gj<--module Ei[m], so 
\u\a.ge{nEjK^) = image(K£2//f J. 

Case 3: v \ poo and Ei has good reduction at v. By our assumptions, E2 has 
potentially good reduction at v. By Lemma [5.3) the reduction of E2 is also good. 
It follows that for i = 1,2, the image of HEi/K^ is the unramified subgroup of 
i/i(X„, £;[/]) (see [31 Lemma 4.1]), i.e., 

image(«;£,/Kj - ker(iji (if,, £;[/]) -> H^K'^^ Elp'^])) 

where if"'' is the maximal unramified extension of K^. Since this subgroup is 
independent of i, we have mia.,ge{KEi/K^) = iniage(K£;2/if^). 

Case 4- I' I 00 and Ei has potentially multiplicative reduction at v. By our as- 
sumptions, E2 also has potentially multiplicative reduction at v, and the images of 
H^{Ky,fipk) -^ H^{Ky,E.i[p'']) are identified by the isomorphism Ei[p'^] = E2[p'']. 

Suppose first that Ei has split multiplicative reduction. Then so does E2 (by 
Lemma l5.7r m. and then Lemma |5 .41 shows that iinage{KEi/K^) = '^^'^^E,^ii'^E2/K^.)- 

Now suppose El does not have split multiplicative reduction, and let L be the 
quadratic extension corresponding to the splitting character of Ei/Ky. By Lemma 
I5.7r i). the splitting characters of Ei and E2 are equal. Let qi be the Tate parameter 
of Ei. By Lemma ISTl u). if p = 2 we have qi € N^/k^L^ -^^ 92 S Nl/k^L^ ■ 

If p > 2, or if p = 2 and gi,g2 ^ ]^l/k„L^, then it follows from Lemma r5.6r i) 
that m\a.ge{KEt/K,) = image(KB2/x„)- 

Finally, suppose that p = 2 and qi G N^fK^E^, say qi — Ni^/k^{Pi)- Let 
X e K^ and the odd integer n be as in Lemma [5Jl( ii) . so ^2 = Qix"^ i and we 
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set 132 = {I3ix^ )" SO Nl/k^USt) = gj- Fix ai G ^^ with af == /3i, and set 
0^2 = (ctia;)", so aj = /32- Using Lemma [5.6r ii'). to show that \in.a,ge{KEi/Kj) = 
un.a,ge{K.E2/KS) i^ i*^ enough to show that the two cocycles 

generate the same subgroup of H^{Ky,E[2^]), for i = 1,2. 

If a fixes L (i.e., ^j{a) = 1), then ((O'^'^'^Va^)^' = /^j^/A = 1, so 

since a; G K^. By hypothesis (iii) we have 

■''Bi/K„(M2'=) =Cbj/k^[2'] =C£;2/x„[2 '] = TE2/K^{fJ'2'') 

inside £^i[2''] = i?2[2'^], and n is odd, so ci and C2 generate the same subgroup of 

If a does not fix L (i.e., -(/"(o-) = -1), then (af)'^('^V"i = l/«aj)> and 
(a^cki)^ = /3f/3i = ^L/K^il^i) ~ 91, so by Lemma FS.yf ii) applied with tti = a^^^i 
we have 

= Ti=;,/K„(((a2)'^^^V«2)") - nrs,/K.((«2)'^''^V«2). 

Thus ci = nc2 in i?^(iir^, _E[2'^]), and n is odd, so ci and C2 generate the same 
subgroup. Thus iiB.age{KEi/K^) — iniage(K£;2/;f^) in Case 4. 

Case 5; u | p, p > 2, i^i and _E2 /laue good reduction at v, and the isomorphism 
El [p^] = E2 [p^] extends to an isomorphism £1 [p^] = 82 \p^] ■ In this case Proposition 
15.81 shows that image(K^j^/x„) = iniage(K£;2/x„)- More generally, suppose x G 
X{Ky), and let L be the quadratic extension of K^ cut out by x- Then Proposition 
15.81 shows that image(K£;j/i) = image(K£;2/L), and this isomorphism preserves the 
natural action of Ga\{L/Ky). Let a denote the nontrivial element of Ga.\{L/Ky), 
and for every Zp[Gal(L/iirt,)]-module M, define M^ := {m E M : m'^ = — m}. 
Since p > 2, one verifies easily using the Hochschild-Serre spectral sequence that 
for z = 1 , 2 we have 

Ef{K,)/p'^Ef{K,) = {EdD/p'E.iL))-, H\K,.Ef[p'^]) = H\L,E,[p'^])- , 

\u\a.ge{KEf/Kj = iniage(KB,/i)^ 

and we conclude that image(K£;x ;^^) — image(K£;x /^^). 

Thus image(K£;x/^^) = image(K£;*:/_R'„) in Q for every v and every Xi and we 
conclude that Ei and E2 are p-Selmer companions over K . 

If F is a finite extension of K , then Ei and E2 satisfy the hypotheses of Theorem 
16.11 over F as well. Applying the proof above with F in place of K shows that Ei 
and E2 are p-Selmer companions over F . D 

Proof of Theorem \3.1\ Theorem l3.1l is identical to Theorem 16.11 except for the sec- 
ond part of hypothesis (iv). Suppose k = \,p \p, Ei,E2 have good reduction at p, 
and the ramification e(p/p) < p— 1 (so in particular p > 2). By Raynaud's theorem 
[T71 §3.5.5], the group scheme £i[p\ is determined by the Galois module Ei[p\. Hence 
in this case the isomorphism Ei [p] = E2 \p] necessarily extends to an isomorphism 
£\\p] = £2[p\- Thus if hypotheses (i) and (iv) of Theorem 13.11 are satisfied, then 
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hypothesis (iv) of Theorem 16.11 is satisfied. In this way Theorem 13.11 follows from 
Theorem EIIl D 

7. Additional questions and remarks 

In this section we discuss some related questions, including partial converses to 
Theorem [5TTJ Fix a number field K. 

7.1. The number of companions. 

Proposition 7.1. Fix an elliptic curve Ei over K , and a prime power p^ > 2. 
There are only finitely many elliptic curves E2/K (up to isomorphism) satisfying 
hypotheses (i) and (ii) of Theorem \3.1l 

Proof. Let 

E — {primes I of K : Ei has bad reduction at [} U {( : ( | p}. 

Suppose that Ei and E2 satisfy (i) and (ii) of Theorem lS.l) and I is a prime of K not 
dividing p. If _E2 has potentially multiplicative reduction at I, then I G S'2 = 5*1 C E. 
Ii E2 has additive, potentially good reduction at I, then so does Ei by Lemma [5T3l so 
( e S. Thus E2 has good reduction at all primes outside of S. By the "Shafarevich 
Conjecture" (proved by Faltings), there are only finitely many such elliptic curves 
E2/K. D 

7.2. Selmer parity companions. 

Definition 7.2. If p is a prime, we will say that two elliptic curves i?i, E2 over K 
are p-Selmer parity companions if for every quadratic character x oi K we have 

dimpp Se\p{E^/K) = dimp^ Se\p{E^/K) (mod 2). 

Remark 7.3. Clearly, if Ei and E2 are p-Selmer companions, then they are also 
p-Selmer parity companions. 

Definition 7.4. For every elliptic curve E/K, define a set of rational primes 

T{E) :— {p : E^{K)[p] 7^ for at least one quadratic character x of K}. 

Lemma 7.5. For every elliptic curve E / K , the set T{E) is finite. 

Proof. This is [6, Proposition 1] when K = Q, and [151 Lemma 5.5] in general. D 

Recall that the Shafarevich- Tate conjecture asserts that the Shafarevich- Tate 
groups of all elliptic curves over K are finite. 

Proposition 7.6. Suppose that either K = CI, or the Shafarevich- Tate conjecture 
holds for K. If Ei, E2 are elliptic curves over K, then Ei and E2 are p-Selmer 
parity companions for one prime p ^ T{Ei)UT(E2) if and only if they are p-Selmer 
parity companions for every prime p ^ T{Ei) U T{E2). 

Proof. Suppose first that K = Q, and for every elliptic curve E/Q define 

Selpoc(£;/Q) :=lii^Selpfe(£;/Q) and rp(£;) := corankz^Selpoc (£;/Q). 

Let D denote the maximal divisible subgroup of Selpoo (£;/Q). If E{K)[p] — 0, then 
Se\p{E/Q) = Selpo-={E/Q)[p], and so the Cassels pairing shows that 

dimp^ Selp(^/Q) - rpiE) + dimp^(Selp»(S/Q)/i5)b] = rpiE) (mod 2). 
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It is proved in 5 that (— l)''p(^) = w{E), the global root number of the L-function 
of E. Thus the parity of dimp Selp(i5/Q) is independent of p ^ T{E) in this case. 
Now let K be arbitrary. If the Shafarevich-Tate group of an elliptic curve E over 
K is finite, then the Cassels pairing shows that 

dimpp Se\p{E/K) = Teink{E{K)) + dimp^ E{K)[p] (mod 2). 

Therefore in this case also, we have that the parity of dimp Selp{E / K) is indepen- 
dent of p ^ T{E). The proposition follows easily. D 

Example 7.7. Consider the curves Ei = 10267V1 and E2 = 102601 over Q of 
the Introduction. Then Ei and E2 are 7-Selmer companions, so they are 7-Selmer 
parity companions. 

We claim that T{Ei) is empty and T{E2) = {3}. Let pi^p : Gq -)■ Aut{Ei[p]) be 
the mod p representation attached to Ei. For every p < 4861 one can check using 
Sage |19] that pi,p is surjective except when p — 3 and i — 2, and for p > 4861 we 
have that pi^p is surjective by [4| Theorem 2]. When pi^p is surjective, no quadratic 
twist E'^ will have a rational point of order p because the mod p representation 
attached to Ef is p^.p ® x, which is irreducible. This proves the claim. 

Thus Proposition 17.61 shows that Ei and E2 are p-Selmer parity companions 
for every prime p ^ 3. In fact, they are not 3-Selmer parity companions because 
Sel3(i5i/Q) — and dimpg Sel3(i?2/Q) = 1 (note that E2 has a rational point of 
order 3). 

This shows that p-Selmer parity companions need not have the same Galois 
action on their p-torsion points. 

We can use the methods and results of [1^ (see also [H]) to determine when two 
elliptic curves are 2-Selmcr parity companions. 

For every elliptic curve E/K and place v of K, let uje,v ■ X{Ky) — > {±1} be the 
map (of sets, not in general a honiomorphism) given by [TD[ Definition 6.1]. 

Theorem 7.8. Suppose Ei, E2 are elliptic curves over K, and T. is a finite set 
of places of K containing all places above 2 and 00, and all primes where either 
El or E2 has bad reduction. Then Ei and E2 are 2-Selmer parity companions if 
and only if diui-p^ ^'^hiEi / K) = dimp^ Se\2{E2/K) (mod 2) and cue-^.v — ^E2,v for 
every u £ S. 

Proof. This follows directly from 10, Proposition 6.2]. D 



The next corollary comes close to showing that hypothesis (ii) of Theorem 13.11 
is a necessary condition. 

Corollary 7.9. Suppose Ei and E2 are 2-Selmer parity companions, and ( is a 
prime of K not dividing 2. Then: 

(i) El has split multiplicative reduction at [ if and only if E2 does, 
(ii) El has potentially multiplicative reduction at [ if and only if E2 does. 

In particular if Si is the set of primes where Ei has potentially multiplicative re- 
duction as in Theorem \3.1[ and E2 := {[ : I | 2}, then S'l U S2 = S'2 U E2- 

Proof. By Theorem 17.81 we have ue-i.i — '^£2,1- Both assertions now follow directly 
from [lOl Proposition 6.9]. D 
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Corollary 7.10. Suppose Ei and E2 are 2- Selmer parity companions, and Ei[4] = 
i?2[4] as GK-modules. If { is a prime of K not dividing 2, then Ei has good (resp., 
additive, resp., multiplicative) reduction at I if and only if E2 does. 



Proof. Combining Lemma 15.31 and Corollary 17.91 we get that 

• El has good reduction at ( if and only if £'2 does, 

• El has additive, potentially good reduction at ( if and only if E2 does, 

• El has potentially multiplicative reduction at [ if and only if £'2 does. 

In the last case. Lemma 15.71 shows that Ei and E2 have the same splitting char- 
acter over K[, so Ei has multiplicative reduction at [ if and only if E2 does. This 
completes the proof. D 

7.3. Selmer near-companions. 

Definition 7.11. We will say that two elliptic curves Ei,E2 over K are n-Selmer 
near- companions if there is a constant C = C{Ei,E2,K) such that for every x G 
X{K) there is an abelian group A^ and homomorphisms Seln{Ef/K) — >■ A^ and 
Se\n{E2 / K) -^ A^ with kernel and cokernel of order at most C. 

Note that Ei and E2 are n-Selmer companions if and only if Definition 17.111 is 
satisfied with C = 1. 

Theorem 7.12. Suppose Ei and E2 are elliptic curves over K. Let m — p "'"^ 
if P ^ 3, and m = p^ if p > i. Suppose further that there is a Gk -isomorphism 
Ei[m] = E2[m]. Then Ei and E2 are p'^ -Selmer near- companions over every finite 
extension F of K . 

Proof. If E is an elliptic curve over K and E is a finite set of places of K , define 

Se\^,{E/K) :=ker(ffi(i^,£[/]) -^ i/i(X,, £[/])/image(KB/Kj). 

Then the definitions yield an exact sequence 

(5) -^ Se\p,[E/K) -^ Se\^.{E/K) -^ ® H\K,„E[p''])/image{KE/Kj- 

Now let S be the finite set of places of K dividing ?iAiA20o, where A^ is the 
discriminant oi Ei. Using the given G/f-isomorphism to identify Ei[p^\ with E2[p^], 
Cases 2 and 3 of the proof of Theorem l6.1l show that if w ^ S, then image(K^x /;^^) = 

image(K£;x/^J for every x G X{K). Therefore Se\^k{E^/K) = Se\^^,{E^/K) inside 
H^{K,Ei[p^]) = H"^ {K , E[p^]) , and we define A^ to be this common group. Now 
if we let 

C:=n sup \H\K,,E^[p*'])\ 

then ^ applied to E^ and £^ shows that Ei and E2 are p'^-Selmer near-compan- 
ions over K . The same proof applies if we replace K by any finite extension. D 

Example 7.13. Take K — Q and p*^ = 2, and let Ei and E2 be the elliptic curves 
26A1 and 598B1 in [2J: 

El : y^ + xy -\- y — x^ — bx — S, 

E2 ■■ y^ -^ xy ^ x^ - x^ -\- Mx + 496. 

The method of §A.1I below allows us to verify that there is a Gq-isomorphism 
El [4] ^ E2 [4] , so El and E2 are 2-Selmer near-companions by Theorem 17.121 
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Using a little more care, we can show that Se\pk{Ei/K) = Selpfc(_Ef /iiT) for every 
X, with E = {23}. In the exact sequences ^ for Ef and _E^ with this S, the right 
hand group has order [£'i(Q23) : 2£'i(Q23)] = 2, independent of x- It follows that 
for every quadratic character x of Gq we have 

diniF^ Seh{Ef/Q) - dimp, Seh{E^/Q) G {-1,0, 1}. 

All three values —1, 0, 1 occur. (Note that Ei has good reduction at 23 and E2 has 
multiplicative reduction, so hypothesis (ii) of Theorem 13. II does not hold.) 

It is natural to make the following conjecture. 

Conjecture 7.14. If n > 1 and Ei,E2 are n-Selmer near- companions over K, 
then Ei[ti\ is Gk -isomorphic to E2[n\. 

Appendix A. Checking that Ei[m] = E2[m] 

Suppose El and £'2 sue elliptic curves over K. In this appendix we discuss two 
methods for verifying that there is a Gx-isomorphism Ei [m] ^ £'2 [^ ■ 

A.l. Universal families. If to = 3, 4, or 5 then 1181 Theorem 4.1], [22l Theorem 

4.1], and [T5] Theorem 5.1], respectively, give explicit models 

(6) Et-.y^ ^x^ + a{t)x + b{t), a{t),b{t) e K[t] 

for the family of all elliptic curves E/K with E[m\ symplectically G/f-isomorphic 
to Ei[m\. (A symplectic isomorphism is one that preserves the Weil pairings.) In 
other words, there is a symplectic Gi<--isomorphism i?i[TO,] = E2[m\ if and only if 
there is an s € ii' such that the specialization Eg is isomorphic over K to E2. 
To test this, we can simply compute the j-invariant of Et 

'4a(t)3 + 275(f)2 

and then find (the finite set of) all zeros in K of the rational function J{t) — ^(£2). 
For each zero s ^ K, we have that Eg is an elliptic curve over K with j{Es) = 
J{s) = J (£2), and it is then a simple matter to test whether Eg is isomorphic to 
E2 over K. If it is, then -Ei[to,] is (symplectically) GA'-isomorphic to E2[m]. But if 
for every zero s G K oi J{t) — ^'(£2) we have that Eg is not isomorphic over K to 
E2, then there is no symplectic Gi<--isomorphism -Ei[to,] = £2 [to,]. 

In the case to. = 4, one can show that there is a G/i--isomorphism i?i[4] = £i^[4] 
that is not symplectic, where Ei is the quadratic twist of Ei by its discriminant 
A. It follows that if £2 [4] is G/f-isomorphic to i?i[4], then £2(4] is symplectically 
G/f -isomorphic either to -Ei[4] or to £^^[4], so we can use the argument above to 
test for all G/f-isomorphisms, not just the symplectic ones. 



Jit) ■■= 1728^—3^^-—^ e Kit), 



Proof of Proposition |.^.7| Let Ei and E2 be as in Example 14.61 Then Ei has the 
short Weierstrass model y'^ = x^ — 5616a; — 494208. Applying [18| Theorem 5.1] 
with a = —5616 and b — —494208 gives an explicit model of the elliptic curve 
Et/Q{t) of ^. If we set J{t) :— j{Et) then we compute that the only rational 
zero of J{t) — j{E2) is —9/22. Specializing Et at t — —9/22 gives a Weierstrass 
model of an elliptic curve isomorphic over Q to £2. Thus there is a (symplectic) 
Gq-isomorphism Ei [5] = E2 [5] . D 
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A. 2. Constructing an explicit isomorphism. Suppose m — p^\ Let fi{x) G 
K[x] be the polynomial of degree d := (p^" — p^"^^)/2 whose roots are the a:- 
coordinates of the points in -Ei[p"] ~ -E^p""^]- Suppose further that /i and /2 are 
irreducible; this is equivalent to requiring that Gk acts transitively on _Ei[p"]/{±l} 
for i^l,2. 

Fix a root ai of /i. Suppose that /2 also has at least one root a2 € K{ai). (If 
Ei[p^] = i?2[p"], then, this will necessarily be the case.) Fix such a root and call it 
a2- Then K(a2) = K(ai), so there is a unique polynomial (f>{x) G K[x] of degree 
less than d such that (j){ai) = a^- Since a\ is a root of /2 o 0, we have that /i 
divides /2 o 0, so </> maps all roots of /i to roots of /2. 

Fix a prime [ of K such that E\ and i?2 have good reduction at I, and [ splits 
completely in K{E\\p^''\)lK. Fix a prime of A'(_Ei[p"]) above [. If Fi denotes the 
residue field of [, this choice gives us a reduction isomorphism 



T^:Er{K)Y 



Ex{^xW 



Note that also maps all roots of /i in F| to roots of /2 in Fj. 

Fix a basis Pi,P2 of ^i(F[)[p"]. Let QxMi e £'i(F|)[p"] be points such that 
x{Qi) — (f>{x{Pi)). Define a group homomorphism ip : _Ei(F[)[p"] -^ £'2(F[)[p"] by 

ip{aPi + 6P2) = aQi + 6Q2 for a,b e Z/p"Z. 

Using the reduction isomorphism tt, we can lift 1^9 to a group homomorphism 
-£'i[p"] ~^ -£'2[p"], which we also denote by (p. Consider the diagram 



Ei[p"] - Ei[p^-^] 



Si(Fi)b"]-^i(F|)b" 



-^S2b"]-^2[P"-^] 



-^E2{Fi)[p"]-E2iFi)[p" 



(7) 



(£;i(FO[p"] - i?i(FOb"-i])/{±l} ^^ (i?2(F0[p"] - i?2(F0b"-i])/{±i} 



(i?i[p"]-i?ib"-i])/{±l}. 



-^(ii;2b"]-^2b"-i])/{±i} 



where [(/>] denotes the map induced by applying the polynomial (j) to the x-coordi- 
nates. The upper and lower squares are commutative, with vertical isomorphisms. 
Let S be the set of places of K where at least one of Ei b"] , -B2 b"] i^ ramified, 
and X{K, S) C X{K) the (finite) subgroup of characters unramified outside of S. 

Lemma A.l. Suppose that the center square of ([7]) is commutative. Then: 

(i) if is a group isomorphism, 

(ii) there is a quadratic character -tjj £ X{K, S) such that ip{P'') — ip{a)ip{P)'^ 
for every P £ Ei b"] and a G Gk ■ 

Proof. If the center square of ([7]) is commutative, then the entire diagram is com- 
mutative. Since (j) G K[x], the bottom map [cj)] is Gif -equivariant. Since /2 is 
irreducible, Gk acts transitively on (i?2b"] ~ ^2b"~"^])/{='=l}- Hence the bottom 
map [(j)] is surjective, so the top map (j) is surjective, and (i) follows. 
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It also follows from the commutativity of dTj and the GK-equivariance of [0] 
that 

(8) (p(P'^) = ±ipiPy for every P e Ei [p"] and a ^Gk- 

For every a £ Gk, the sets 

{P e SiK] : ^{Pn = ^{Py}, {P e i?i[p"] : v^iPl = -¥'(P)"} 

are subgroups of i?[p"]. It follows from ([8|) that the union of these two subgroups 
is E[p"], and therefore one of them must be all of -E[p"]. Thus for every a we can 
define ipicr) = ±1 so that ip{P'^) = ip{a)Lp{P)"' for every P £ Ei[p"-]. One sees easily 
that ip £ X{K), and tp is necessarily unramified outside 5*, so ^ € '^{K, S). D 

Suppose now that the center square of (O is commutative. Let V' G '^{K, S) be 
the character of Lemma lA.ir ii) . Then by Lemma lA.li tp induces an isomorphism 
£'i[p"] —^ E^Ip"], where E'f is the quadratic twist of E2 by ip. We would like to 
verify that ip must be the trivial character. 

Fix a basis Xi, . . • , Xt of the r2-vector space X{K, S). Suppose that for every i, 
1 < i < t, we can find a prime q^ of K, q^ ^ 5, such that 

• XtM = -1, Xj(q») = 1 if jV *, 

• the traces of Frobenius of q^ on Ei [p"] and £'2 [p"] satisfy 

Trace(FrobcJ£;i[p"]) ^ -Trace(Frobqj£:2b"]). 

Choose a nontrivial character x — Yii xT ^ '^{K, S), a.i £ {0, 1}. If ai ^ for some 
i, then by our choice of q^ we have Trace(FrobqJi5i[p"]) ^ Trace(FrobqJi?|[p"]), 
so i?i[p"] ^ i?2'[p"]. Hence V' must be the trivial character. 

All of the steps above can be handled by either Sage [19| or PARI/GP [23] . Com- 
puting the polynomial 4>{x) is the only significantly time-consuming step. Finding 
a prime [, checking the commutativity of (O, and finding primes q^ with appropri- 
ate traces of Frobenius is very quick. (Note that the points Qi,Q2 £ Ei{Fi)[p^] 
are only defined up to multiplication by ±1. If the first choice does not lead to 
commutativity in ([7]), then replacing Qi by — Qi may still work.) 

Proof of Proposition \4-5\ Let Ei and E2 be as in Example 14.41 both of conductor 
1242 = 2 • 3"^ • 23, and m = 8. PARI/GP computes the polynomial (j>{x) of degree 
(8^ — 4'^)/2 = 24 in less than a minute on a modern desktop computer. We take 
[ := 19681, and 

Pi := (731, 4673), P2 := (3074,1044) £ Si(Fi968i). 

Then Pi,F2 generate Ei[8], and we compute that 0(731) = 10530 (mod 19681) 
and (/)(3074) = 17962 (mod 19681). We define (p as above using the points 

Qi = (10530, 9277), Q2 = (17962, 16270) £ E^iFigesi), 

and we check directly that the center square of ([7]) commutes. Therefore Lemma 
I A. II shows that (p : Ei[8] — >■ -E2 [8] is a Gq-equivariant isomorphism, where ■0 G 
X{Q, {cx), 2, 3, 23}). The group X{Q, {00, 2, 3, 23}) is generated by the characters 
X-1iX2jX--3jX-23, where Xd is the quadratic character of Q(\/d)/Q. We find the 
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following data, where aq{Ei) is the trace of Frobenius Frobq. 



9 


x-i(g) 


X2(g) 


x-siq) 


x-2d.{q) 


aq{Ei) (mod 8) 


aq{E2) (mod 8) 


31 


-1 


1 


1 


1 


2 


2 


349 


1 


-1 


1 


1 


2 


2 


233 


1 


1 


-1 


1 


2 


2 


241 


1 


1 


1 


-1 


6 


6 



The argument above shows that -0 is the trivial character, so Lp : Ei[ 
a Gq-equivariant isomorphism. 
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